• Support
  • not able to renew SSL certificates on the website

Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

aaP_anandjani

3 months later

I am facing similar problems, as I reported here: https://www.aapanel.com/forum/d/19981-problems-to-auto-renew-ssl-certificates-lets-encrypt/7

The problems is present since, at least, aaPanel version 6.8.36.
Now I am running version 7.0.8. What the cron logs register changed a little, but the problem still is there.
The cron logs are registering the certificates were renewed, but they were not.
Maybe the renewed certificates are saved in the wrong location.

I did the manual renew of SSL certificates a couple of times, but after 2 months, the certificates were not renewed again.
Now, in version 7.0.8 seems there is no more button to manual renew the SSL certificate.

    Hello, since the SSL Certificate brand has changed, it is currently not supported. This issue will be optimized in the future.

    Nanno

      aaPanel_Kern

      I have the same issues with the auto SSL certificate renewal via Cron. its logs said that it said.

      No SSL certificate found within 30 days! 

      This is my domain list

      I also had my manual renewal SSL certificate which I wish to renew all certificates that are below 30 days on Cron. it happened to install the panel SSL. However, the expired date on the list is not updated yet.

      Cron logs

      ----------------------------------------------------------------------------
      
      |-A total of 1 certificates need to be renewed
      |-Renew the visa certificate and start checking the environment
      []
      |-Renewing certificate number of 1,domain: ['aapanel.localdomain']..
      |-Creating order..
      |-Getting verification information..
      |-Verify the dir:/www/wwwroot/panel_ssl_site/.well-known/acme-challenge
      |-Verification type: http-01
      |-Verifying domain name..
      |-1 Query verification results..
      |-Verification succeeded!
      |-Sending CSR..
      |-Downloading certificate..
      |-Renewed successfully!!
      ----------------------------------------------------------------------
      ----------------------------------------------------------------------------
      ★[2024-08-25 08:32:36] Successful
      ----------------------------------------------------------------------------
      
      |-No SSL certificate found within 30 days!
      |-All tasks have been processed!
      ----------------------------------------------------------------------------

      I did to renew another SSL certificate by manually execute the Cron task once again and no renewal actions for another domains

      ★[2024-08-25 08:33:51] Successful
      ----------------------------------------------------------------------------
      
      |-No SSL certificate found within 30 days!
      |-All tasks have been processed!
      ----------------------------------------------------------------------------

      Kindly please check why this happened?

        Hi, can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
        It is recommended to fill in the following
        Post link:
        SSH IP address, account password and port:
        aapanel login link address and account password:
        Detailed problem description:

        No post link will not be able to know which user's information is, and the problem will not be processed

        aaP_demo1

          aaPanel_Kern
          Hi, Kern

          I just updated my info to your email now. Please kindly proceed and reply me back with your public IP so I can allow access to the server.

          Thank you.

            Hi, thanks for your information. Currently, the developer can see from the database that you use DNS verification and manually resolve domain name records. This will not automatically renew.
            DNS verification requires the use of DNS API to automatically renew

            aaP_demo1

              aaPanel_Kern

              all my domain names were using DNS Verification and fully manual by DNS manager in aaPanel.
              Am I going to manually renew the SSL Certificate or reissue the SSL certificate using File Verification one by one?

              I just want the method that could help me enable auto-renew certificate of my domain name in the future.

                Hello, please do not use a DNS manager. Use the domain name provider’s website directly to manage domain names.
                Use file verification, or use the CloudFlare API with DNS verification

                aaP_demo1

                  4 months later

                  Hello, please help me with certificate updates. Certificates for all domains are not updated. The update hangs on the first certificate with this log.

                    Hello, thank you for your feedback, we will optimize this issue
                    You can also try to renew SSL manually in the website

                    aaP_saintfriday001

                    12 days later

                    @aaPanel_Kern since Lets Encrypt SSL autorenewal in cronjob (/www/server/panel/pyenv/bin/python -u /www/server/panel/class/acme_v2.py --renew=1) has not been working for sometime now (the log shows successful renewal message but the SSL is not updated) is there any work around to this to make it automated? or a command that can be used to put into custom cron job?

                    For example, since manual renewal works fine, what is the manual bash command that can we use to put into cronjob?

                    Other than that, is there any ETA when you fix the cronjob for Let's Encrypt SSL autorenewal?

                    I had this issue with 6.8.x, upgraded to 7.0.13 and the issue remains the same.

                      Hello, it is recommended that you renew manually first. Is this normal?
                      Are you using DNS verification or http verification?

                      aaP_krzysztof

                        aaPanel_Kern before we start potentially-many-days-investigation here could you please just for now show us the terminal / python command that triggers the same action as when we go to Site modification and hit Renewal SSL so can run this command manually from system cronjob?

                        I use default settings which is http-verification.

                        @aaPanel_Kern on top of that, I deleted on of the sites and domain completely. This domain was included in the SSL wildcard.

                        Now after removal, the SSL is still trying to renew the removed domain causing renewal error.

                        I deleted SSL and tried to recreate - same issue.

                        I deleted /www/server/panel/config/letsencrypt_v2.json file but problem remains.

                        Where is this domain stored? It's not present on the Websites list, it's not attached to any existing sites but still is somehow visible to the letsencrypt script. How to delete the domain then?

                          Hello, I suggest you wait for this issue to be fixed. If the SSL certificate is about to expire, please renew it manually first

                          aaP_krzysztof

                          Connect with us: 📨 Telegram 💬 Discord Email: support@aapanel.com